Search

MrJohn230

Hello, I have the below code. I'm trying to create a new column that extracts and pivots CareCnts, CoverCnts, NonCoverCnts, etc... (There are more but I have simplified). These |eval are related to t...

MrJohn230 · ‎10-19-2023

Hello, I'm working in splunk enterprise 8.2.4 I have the below search index=Red msg="*COMPLETED Task*” | spath output=logMessage path=msg | rex field=logMessage "Message\|[^\t\{]*(?<json>{[^\...

zoe · ‎07-19-2022

Hi, I habe a table after using stats: | stats values(durationSum) as duration by Fauf Station. How can I convert it to a table with only one line in such a format: Fauf duration_Station1 ...

jeck11 · ‎08-03-2021

Hi everyone, I have a very basic search outputting two types of entries into a field called "event". I need to get a count of each type per hour. I've been able to get the view I want using the pivot...

kensternberg · ‎05-14-2014

I want to use a 'where' clause (which allows the comparison of two fields) as a pivot constraint. My original search is index=maillog (event=SEND OR event=RECEIVE) Which gives me all the s...

ShaneNewman · ‎06-06-2014

I have to use a root search in a pivot due to needing to join another data type. Is there a way to get _time to extract as Time? I have setup an eval in the pivot to extract the _time field but it w...

sspencer_splunk · ‎10-20-2013

...reate a pivot, I've discovered that I can't figure out how to filter the pivot on more than one value of a particular attribute. For example, I'd like to be able to filter my pivot down to customers t...

julz0815 · ‎02-20-2017

I have index=webserver_logs and source=security_logs and can search both in a single query: index=webserver_logs | append [search source=security_logs] I get a table with all events and just sele...

jperry_intact · ‎04-26-2018

I'm trying to figure out how to build an excel-like pivot table using 3 or more columns. As example, I have this data: customer1 project1 note1 customer1 project2 customer1 p...

wyang6 · ‎09-07-2010

Hi, I have a few columns of data and I would like to generate a pivot table that is similar to the one in Excel. As an example: Date/City/Day/Response ----------------- 09-01/New York/Monday/Y...

Search

Search

Search the Community

Query Pivot multiple columns

Pivot/UnPivot Data from json msg

How to pivot convert in Splunk?

convert pivot table into stats

pivot | where

Pivot Issue

Pivot table filter flexibility?

two searches in pivot

Excel Like Pivot Table

Create a Pivot Table